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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely, 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)03 Responsive to communication(s) filed on 03 August 2001 . 
2a)D This action is FINAL. 2b)K This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) 03 Claim(s) 1-33 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) [>3 Claim(s) 1.2. 7. 10, 15. 16.21.22 and 28-33 is/are rejected. 

7) S Claim(s) 3-6.8.9.1 1-14. 17-20 and 23-27 is/are objected to. 

8) Q Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
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DETAILED ACTION 

1 . Claims 1 -33 are pending. 

Specification 

2. The disclosure is objected to because of the following informalities: 
On page 18, line 19, "The server 330" should be "The server 310". 
Appropriate correction is required. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-2, 7, 10, 15-16, 21 and 32-33 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Geiger et al. (6,463,534) in view of Cutaia et al. 
(2002/0004390). 

a) As to claims 1 and 32-33, Geiger discloses a method of conducting 
transactions in a wireless electronic commerce system comprising receiving a certificate 
with indication of access rights (col. 1 1 , lines 1 -1 0) from the wireless terminal (Fig. 4; 
wireless device with certificates stored in WIM (WAP Identity Module or Wireless 
Identity Module) (col. 11, line 64 to col. 12, line 8; col. 17, lines 14-17) communicates 
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with attribute authorities); determining whether the received certificate corresponds to a 
service provider authentication certificate which identifies access rights for a targeted 
service (col. 12, lines 19-21); directing the network connection to the targeted service if 
the received certificate corresponds to the service provider authentication certificate 
(col. 14, lines 36-42). 

However, Geiger does not disclose directing the network connection to an 
enrollment module to register for the certificate if the received certificate does not 
correspond to the service provider authentication certificate. 

Cutaia discloses a method and system for managing telecommunications 
services and network interconnections comprising the step of directing to enrollment to 
register for registration information (i.e. file loaded on computer, known as "cookie", to 
identify registration information) if the received inquiry does not contain registration 
information (page 5, paragraph [0040]) which reads on the step of directing the network 
connection to an enrollment module to register for the certificate if the received 
certificate does not correspond to the service provider authentication certificate. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ to use of directing the connection to an enrollment module to 
register for the certificate if the received certificate does not correspond to the service 
provider authentication certificate in the system of Geiger, as Cutaia teaches so as to 
provide users with proper registration procedures before accessing services. 

b) As to claim 2, Geiger discloses the step of providing a list of one or more 
available predetermined certificates to the wireless terminal (col. 6, lines 1-4). 



Application/Control Number: 09/922,440 Page 4 

Art Unit: 2137 

c) As to claim 7, Geiger discloses the step of receiving a certificate 
comprising receiving the certificate via a client certificate message issued by the 
wireless terminal (col. 13, lines 53-57). 

d) As to claim 10, Geiger discloses the access rights possessed by the user 
are stored as local certificates on a Wireless Identity Module (i.e. license certificate, col. 
5, lines 16-22; col. 11, line 64 -col. 12, line 8). 

e) As to claim 1 5, Geiger discloses the step of determining whether the 
received certificate corresponds to a service provider authentication certificate 
comprising comparing the received certificate to the service provider authentication 
certificate (col. 12, lines 19-21). 

f) As to claim 16, Geiger discloses a system of conducting transactions in a 
wireless electronic commerce system comprising a service module from which a service 
provider avails the secure service to the user of the wireless terminal (Fig. 4, elements 
404-406); an enrollment manager to effect user registration to the secure service (col. 
10, lines 32-37). 

However Geiger does not disclose a switch module coupled to receive a security 
certificate in establishing a connection wherein the switch module directs the connection 
to either the service module or the enrollment manager depending on the security 
certificate. 

Cutaia discloses a method and system for managing telecommunications 
services and network interconnections comprising a switch module to direct the 
connection to either the inquiry services (Fig. 2, element 208; i.e. service module) or the 
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enrollment manager (Fig. 2, element 206) depending on the registration information (i.e. 
file loaded on computer, known as "cookie", to identify registration information) (page 5, 
paragraph [0040], i.e. the certificate). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ to use of having a switch module coupled to receive a security 
certificate in establishing a connection wherein the switch module directs the connection 
to either the service module or the enrollment manager depending on the security 
certificate in the system of Geiger, as Cutaia teaches so as to provide users with proper 
registration procedures before accessing services. 

g) As to claim 21 , Geiger discloses the security certificate comprises an 
authentication certificate (col. 16, lines 42-44). 

5. Claim 22 is rejected under 35 U.S.C. 103(a) as being unpatentable over Geiger 
et al. (6,463,534) in view of Cutaia et al. (2002/0004390) and further in view of Bisbee et 
al. (6,367,013). 

Geiger discloses authentication certificate, however he does not disclose the 
authentication certificate comprises at least one of an identity verification authentication 
certificate, an authorization certificate and a non-repudiation certificate. 

Bisbee discloses a system and method for electronic transmission, storage and 
retrieval of authenticated electronic original documents wherein the authentication 
certificate comprises at least one of an identity verification authentication certificate, an 
authorization certificate and a non-repudiation certificate (col. 2, lines 46-64). 
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It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ to use of authentication certificate comprising an identity verification 
authentication certificate, an authorization certificate and a non-repudiation certificate in 
the system of Geiger and Cutaia, as Bisbee teaches so as to provide the requisite 
security for electronic wireless transaction. 

6. Claims 28-31 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Rajan et al. (6,463,534) in view of Geiger et al. (6,463,534) and further in view of Cutaia 
et al. (2002/0004390). 

a) As to claim 28, Rajan discloses a system of gathering data and 
transmission over wired and wireless network connections comprising a wireless 
network including a plurality of wireless terminals operable therein (Fig. 1, elements 13, 
39, 41 and 43); a network of computing systems (Fig. 1 , elements 11, 15) wherein at 
least one of the computing systems comprises a server computing system (Fig. 1, 
elements 21, 23, 25) hosting a secure service (col. 4, line 61 to col. 5, line 5) targeted 
by at least one of the wireless terminals (Fig. 2) and wherein at least one of the 
computing systems comprises an enrollment server (Fig. 1, element 33; col. 6, lines 12- 
16; col. 7, lines 10-13; col. 10, line 57) to effect user registration to the secure service; a 
gateway computing system configured to bridge communications between the wireless 
network and the network of computing systems (Fig. 1, element 37). 

Rajan discloses digital authorization certificates, secure digital signature forms 
may be held in the content servers, however, Rajan does not disclose a network switch 
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coupled to receive an authentication certificate utilized by a wireless terminal in 
establishing a connection with the network of computing systems, wherein the network 
switch switches the connection to the server computing system or the enrollment server 
depending on the authentication certificate utilized by the wireless terminal in 
establishing the connection. 

Geiger discloses a system of conducting transactions in a wireless electronic 
commerce system comprising authentication certificate utilized by a wireless terminal 
(Fig. 4; wireless device with certificates stored in WIM (WAP Identity Module or Wireless 
Identity Module) (col. 11, line 64 to col. 12, line 8; col. 17, lines 14-17) in establishing a 
connection with the network of computing systems. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ to use of utilizing authentication certificate by a wireless terminal in 
establishing a connection with the network of computing systems in the system of 
Rajan, as Geiger teaches so as to securely provide accesses to services using 
authentication certificates. 

However Rajan and Geiger do not disclose a network switch coupled to receive 
an authentication certificate utilized by a wireless terminal in establishing a connection 
with the network of computing systems, wherein the network switch switches the 
connection to the server computing system or the enrollment server depending on the 
authentication certificate utilized by the wireless terminal in establishing the connection. 

Cutaia discloses the concept of switching either to the inquiry services (Fig. 2, 
element 208; i.e. server computing system) or registration services (Fig. 2, element 206) 
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based on whether or not the inquiry information from customer contained registration 
information (i.e. file loaded on computer, known as "cookie", to identify registration 
information) (page 5, paragraph [0040], i.e. the certificate). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ to use of having a network switch coupled to receive an 
authentication certificate utilized by a wireless terminal in establishing a connection with 
the network of computing systems, wherein the network switch switches the connection 
to the server computing system or the enrollment server depending on the 
authentication certificate utilized by the wireless terminal in establishing the connection 
in the system of Rajan and Geiger, as Cutaia teaches so as to provide users with proper 
registration procedures before accessing services. 

b) As to claim 29, Geiger discloses the gateway computing system 
comprises a comprises a Wireless Application Protocol gateway (Fig. 1 , element 18), 
and at least the wireless terminal establishing the connection with the network of 
computing system comprises a WAP-compliant terminal (Fig. 1, element 11). 

c) As to claim 30, Rajan discloses the WAP-compliant terminal comprises 
one of a wireless telephone, personal digital assistant, wireless pager and wireless 
laptop computer (col. 1, lines 45-48). 

d) As to claim 31 1 Rajan discloses the network of computing systems 
comprises the Internet ((Fig. 1 , element 1 1 ) and wherein the Wireless Application 
Protocol is used to communicate between the wireless terminal and the Internet (Fig. 1 , 
element 37). 
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Allowable Subject Matter 



7. Claims 3-6, 8-9, 11-14, 17-20, 23-27 are objected to as being dependent upon a 
rejected base claim, but would be allowable if rewritten in independent form including all 
of the limitations of the base claim and any intervening claims. 

Conclusion 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Minh Dieu Nguyen whose telephone number is 571-272- 
3873. The examiner can normally be reached on M-F 6:00-2:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Caldwell can be reached on 571-272-3868. The fax phone number 
for the organization where this application or proceeding is assigned is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 571-272- 
2100. 
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